Win32:AutoRun-JW removal instruction

The Win32:AutoRun-JW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:AutoRun-JW virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:AutoRun-JW?


File Info:
name: 157A954F8B43F198DB01.mlw
path: /opt/CAPEv2/storage/binaries/947b37441186a025e42880699a2d1efc7473ddd03e2f1aaa18a945c001f5b45e
crc32: 42840473
md5: 157a954f8b43f198db01e404ead90aa4
sha1: b4e74b8ddb53d3f4293fdabe73771eecf573e7bb
sha256: 947b37441186a025e42880699a2d1efc7473ddd03e2f1aaa18a945c001f5b45e
sha512: 457f3ba312299c3bd8cb506a2924311988fe5db07995a3802d31f1e5e08791bfb65b6b317c396d45db243d2145614494a92dd003687e4cdfe92e2f241b2f0120
ssdeep: 768:+NYlvW8IKe91+2XUVjIeSh8mV/VM4dBMvA71Lo7sUfxwS1F7mBWFoZ8j1TtLA2Ga:ssvW8vs17UVceh9Ox/iUM7ycZ50ir4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9530A1BBE54402EE292CAB01C7894597D663E350AD1AC9773C5FF982972293B8F431F
sha3_384: bd312f96d991ef9c7985687e71a708cdb4db52d626798ee105ce016ca4b7061cdd0d70fc332e26af972cf5a77a179a63
ep_bytes: ee6a10663168106644c20c669b6a0e66
timestamp: 2008-09-03 02:08:04

Version Info:
0: [No Data]

Win32:AutoRun-JW also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
FireEye	Generic.mg.157a954f8b43f198
McAfee	Artemis!157A954F8B43
Malwarebytes	VB.Trojan.Generic.DDS
Sangfor	Win.Worm.Lamer-6726367-0
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/S-c56c2e5e!Eldorado
APEX	Malicious
ClamAV	Win.Worm.Lamer-6726367-0
Avast	Win32:AutoRun-JW
F-Secure	Trojan.TR/Vundo.Gen
McAfee-GW-Edition	BehavesLike.Win32.Generic.km
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.GNP7M2
Jiangmin	Heur:Worm/Autorun
Google	Detected
Avira	TR/Vundo.Gen
Antiy-AVL	Trojan/Win32.Wacatac
Xcitium	TrojWare.Win32.Trojan.XPACK.Gen@2ho5ur
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R146127
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH06E423
Rising	Trojan.Generic@AI.100 (RDML:uWpz3RseoESY3vInmqK5XA)
Ikarus	Trojan.Win32.LaSta
Fortinet	W32/PossibleThreat
AVG	Win32:AutoRun-JW
Cybereason	malicious.ddb53d
DeepInstinct	MALICIOUS

How to remove Win32:AutoRun-JW?

Win32:AutoRun-JW removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X